What are LOLBins? How to Detect Malicious Threats
LOLBin stands for “Living Off the Land Binaries,” tools that are pre-installed as part of an operating system. LOLBins are not malicious in themselves but…
Category: ThreatIntelligence-IncidentResponse
PerfMon! What Is It Good For?
In his hit song “War,” Motown singer Edwin Starr asked a poignant question: “War, huh, yeah, what is it good for?” Well, from a purple…
The Huntress Cyber Insurance Trends Report (2025)
The best offense is a good defense, and this is even more true when it comes to cyber threats. Cyber insurance may not be at…
2025 Cybersecurity Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings
At Huntress, we like to wreck hackers. But to take them down, we first have to understand how they operate. That’s why we created the…
How Effective Is Your SAT Program?
In a recent The Wall Street Journal article titled “Phishing Tests, the Bane of Work Life, Are Getting Meaner,” writer Robert McMillan explores a common…
Uncover Tomorrow’s Cyber Threats Today
Cyber threats are getting smarter, sneakier, and harder to catch. In 2024, we analyzed data from thousands of organizations and millions of endpoints and found…
Cybersecurity Threats in Healthcare [2025 Report]
From stethoscopes to smartphones, healthcare’s embracing technology—and the risks that come with it. The things that have made healthcare more accessible, like online prescription fillings…
How Huntress Achieved a Blazing Fast MTTR
When it comes to cybersecurity, speed can make the difference between blocking an attacker at the front door and finding out they’ve helped themselves to…
Detect and Eliminate Persistent Malware Before It Wreaks Havoc
If you’ve been in cybersecurity for a minute, you know malware doesn’t just show up and disappear. Hackers don’t drop a payload and call it…
90% of IT Pros are Confident in Remote Cybersecurity
In 2025 and beyond, major employers have plans to implement a return-to-office policy, leading to many employees looking for new roles. But why are some…
Untold Tales from Tactical Response
Security professionals are constantly ingesting threat reports, write-ups, and blogs on various defensive and offensive techniques. These include detailed write-ups on actual intrusions. Here, we’d…
CVE-2026-21992: Oracle Fusion Middleware RCE
Oracle published an out-of-band security alert for a critical vulnerability in Oracle Identity Manager and Oracle Web Services Manager, following in-the-wild exploitation of a related…